Assemble a compliance attestation pack for [PolicyID] covering [AuditPeriod] across [Sites]. Define testing of control design and operating effectiveness with a [SampleSize] sample for each control family. Establish exception handling, compensating controls, and approvals by [ExceptionApprovalRole].
Output requirements:
Control Test Plan (table: Control, Objective, Test Steps, Sample Size, Evidence).
Sampling Methodology (statistical rationale and selection method).
Evidence Checklist (artifacts, retention period).
Exception Register (risk rating, action plan).
Attestation Letter Template (fillable placeholders).
Management Representation Questions (list).